Credit Repair Contracts: What CROA Requires

A compliant credit repair contract is not optional paperwork; it is a federal requirement. The Credit Repair Organizations Act (CROA) dictates exactly what your agreements must say, what you can promise, and how clients can cancel. Get it wrong and you expose your business to serious penalties. Get it right and you build trust from the first signature.

This article is educational and is not legal advice. Have a qualified attorney review your contracts and compliance program.

What CROA Is and Why It Exists

CROA is a federal law, enforced by the FTC and the CFPB, designed to protect consumers from deceptive credit repair practices. It applies to companies that, for payment, help consumers improve their credit or advise them on doing so. The full statute is available on the FTC's CROA page. The core idea is simple: tell the truth, put it in writing, charge only for work performed, and let people walk away.

Required Written Contract Terms

Before any work begins, CROA requires a written, dated contract signed by the consumer. It must clearly include:

• A full description of the services to be performed.
• The total cost, including all charges and the terms of payment.
• An estimate of how long it will take to achieve results, or the date by which services will be completed.
• Any guarantee offered.
• The company's name and business address.

Vague "we'll fix your credit" language doesn't satisfy this. Specificity is the point.

The Mandatory Disclosure Statement

Separately from the contract, you must give consumers a written disclosure titled "Consumer Credit File Rights Under State and Federal Law" before signing. This document tells consumers they can dispute inaccurate information themselves for free, that they're entitled to a free annual credit report, and how to contact the relevant agencies. It must be a standalone document the consumer keeps. For a consumer-side view of these protections, the FTC's overview of how to help yourself is the same spirit of disclosure.

The Three-Day Cancellation Right

Every credit repair contract must give the consumer the right to cancel, without penalty or obligation, within three business days of signing. You must include a cancellation form with the contract and explain how to use it. You cannot perform any services or collect any payment during this window. This cooling-off period is non-negotiable.

The No-Upfront-Fee Rule

This is the rule that trips up the most businesses: under CROA, you cannot charge or collect any fee until you have fully performed the service you promised. You cannot take payment in advance for future work. This is why compliant operators structure billing around completed milestones or post-work monthly cycles rather than large upfront deposits. Our guide on compliant credit repair fees digs into pricing models that satisfy this requirement.

What You Can Never Promise

CROA prohibits false or misleading statements. You may not:

• Guarantee that accurate, negative information will be removed.
• Advise clients to make false statements to credit bureaus or creditors.
• Suggest creating a "new" credit identity using an EIN or CPN in place of an SSN.
• Misrepresent the services you can realistically perform.

You can dispute inaccurate, incomplete, or unverifiable items, but you cannot promise to erase legitimate, accurate negatives. To understand the broader regulatory picture, see our overview of FCRA rights and our breakdown of CROA compliance for operators.

Building Compliance Into Your Workflow

Contracts, disclosures, cancellation forms, and milestone-based billing are a lot to manage by hand, and a single missed disclosure can sink an agreement. Purpose-built credit repair software like Ultra Dispute bakes compliant contract templates, e-signatures, and CROA-aligned billing into the onboarding flow, so every client starts on solid legal footing. Compliance isn't the part of the business you bolt on later; it's the foundation that lets everything else scale safely.